Invicti vs. Kali Linux

Netsparker is very thorough but can take a very long time to scan a web application. It can also take a long time to learn and configure. Its thoroughness is a very good part of the product but if the application does [not] need this thoroughness it is probably a waste of time to run Netsparker on the website.

Incentivized

Kali is well suited for the following:

• Analyzing SSL certs to verify
  they are installed correctly
• Analyzing SSL configuration on
  servers to confirm correct ciphers are enabled
• Scanning our web servers for
  vulnerabilities as part of our regular security testing
• Scanning wordpress sites to
  identify out of date plugins and other potential security issues.
• Running port scans on our servers
  to make sure only certain ports are open

It is not appropriate for users who aren't already familiar with cybersecurity. Kali is an advanced OS geared for cybersecurity applications.

Incentivized

• Netsparker is a product that many security companies use to scan their clients websites. This means it has good reputation and we can use that reputation when we show our Netsparker scan to our clients.
• Netsparker is very customizable and allows us to reduce the scan time by making sure we do not spend time scanning technologies that are not being used in the application. Once a set of customizations are configured they can be applied to similar types of applications. This allows us to quickly setup a vulnerability scan of new applications.
• Netsparker includes numerous vulnerability points to test for. This means that sometimes thousands of possible vulnerabilities are tested. Other scanners to do not always scan for all of these types of vulnerabilities.

Incentivized

• Open source
• Suite of tools for PT
• NEtHunter

Incentivized

• NetSparker does not integrate with all systems. Currently, it is limited to popular systems, using Java for example.
• NetSparker is priced at a higher range. I believe with all its competition, the pricing could be a little better.
• NerSparker could improve its user experience. There should be a way to find out if a system has vulnerabilities directly through e-mail.

Incentivized

• Usage wise, it is tough for use by beginners. Can be improved.
• With Kali Linux have noticed driver related issues especially with Nvidia graphics cards.
• Kali Linux can be improved for use as a day to day OS.

Incentivized

NetSparker support is amazing. When first introducing this software to the team, there was a lot of communication going on between Netsparker consultants and our team. They have answered our questions very efficiently and have had consultants come to our department for training. They are open to suggestions for improvements and enhancements as well.

Incentivized

Our department used to use Veracode as our security scanning software. Compared to Veracode, Netsparker has a very organized dashboard with built-in tools that making collaborating with other teammates very efficient and easy. Another teammate can definitely take over the work I am doing in NetSparker with minimal explanation.

Incentivized

As Parrot security OS is relatively new to the game, Kali Linux has an edge as it is in the market since 2013. Kali Linux has an advantage that it is opensource and has good back end technical support by open source developers worldwide. Also Parrot security OS is based on cloud environments and Kali Linux OS is made to run in house.

Incentivized

• NetSparker has saved the team a lot of time since the scans quicker than our older software.
• NetSparker has been costing the company a lot compared to previous security software.
• Netsparker has helped improved our overall business objectives by finding an efficient and collaborative way to run scans on our systems.

Incentivized

• Kali is a free OS which makes it very useful to install so many tools while not paying a premium

Incentivized